Loading video...
Video Failed to Load
LM just released a stage2 test payload to enable debug settings and the fpkg installer on 11.00. This is still a test payload and does not enable HEN so the fpkgs will not run.
31,659 views • 2 years ago •via X (Twitter)
12 Comments
@LightningMods_ Thanks for the update.
INTRODUCING: Agentic Security - LLM Security Scanner! 🔍 🔑 Features: Scans for prompt injections, jailbreaking & more. Provides detailed reports & options to customize attack rules. 🔗access the GitHub Link ↓
@LightningMods_ Always on top of it lol
@LightningMods_ can you provide a tutorial on how to use like the interface which you are using.
@LightningMods_ In terms of loading the exploit as shown in the video my last video covered that in detail. This new payload for debug settings is only a test payload to show progress.
@LightningMods_ thanks for the news, your work is appreciated
@LightningMods_ @MODDED_WARFARE thanks for the update keep up the good work
@LightningMods_ I keep getting scanning for corrupted object please retry
@LightningMods_ Pruebas y mas pruebas
@LightningMods_ 😭😭😭ps5 please
@LightningMods_ Wait is There any Program in window that are required to enable GoldHen And Debug Menu?
@LightningMods_ for 10.01 you have news?
![How do you create your payloads in 2025? At MSec Operations we prefer to use DLL sideloading for EDR evasion. This technique allows our malicious code to run within a signed, legitimate executable. Combining this technique with other useful techniques will provide stable execution to fly under the radar. 🛸 The following video demonstrates the use of #RustPack to create such a payload in just a few seconds. The command line usage shows that our input payload is a simple unmodified Apollo C2 executable. We want to clone all the exported functions from the original Windows wininet.dll to create our own library with the same name. The execution of the payload will be delayed by ~5 seconds in this case, without using the Win32 sleep function, but by performing random calculations. ⏲️ Hardware breakpoints are used to bypass the Antimalware Scan Interface (AMSI). Without an AMSI bypass, Apollo would be flagged as a C# assembly when loaded. 🎓 Our payload will only fire on a domain joined system, this basically prevents it from running in e.g. sandbox environments. 🤠 Last but not least, in this example, the encrypted payload itself is stored in a separate file on the target system and not even in the same folder as our malicious DLL. Anyone analysing just the DLL will never be able to find out what the payload is. Automatic sample submissions for cloud analysis usually only upload the executable or DLL, emulators won't see the real payload either. 🤠 Tired of creating such payloads yourself? With #RustPack it's really easy, and payloads always look completely different, even if the same payload is packed twice to avoid signature-based detection Contact us via info[at] for more information! 👍](https://image.24vids.com/tw-1881421688572952651/ext_tw_video_thumb/1881420234654953473/pu/img/J3hM_loRV7uoHe3r.jpg)